CVE-2020-7720 PUBLISHED

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions.

EPSS 2.09% · 83.9th percentile

Risk Scores

EPSS Score
2.09%
83.9th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSnode-node-forge0, 0.8.5~dfsg-2, 0.9.1~dfsg-1

Timeline

References

Open in Interactive Console →